$ rpki-client -vvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json) Hash identifier: SwH+gPmG29t+jOqd5U5mDTfRqUBH2JmtMMwzcPBUv/A= Subject key identifier: 50:E1:B3:92:DB:E6:72:FE:50:EC:4B:98:E6:E0:FB:8A:BE:EB:1E:8C Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 Certificate issuer: /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344 Certificate serial: 71A66C58A8E692A5618CBDC8664A5707CD70EA75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:06:24 +0000 Manifest this update: Mon 20 Jul 2026 16:01:24 +0000 Manifest next update: Tue 21 Jul 2026 17:55:24 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=) 2: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: WhRm+KM32Pk844nsN6/x5ZK73U2pnZj5hwmGdHOvoVc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a6:6c:58:a8:e6:92:a5:61:8c:bd:c8:66:4a:57:07:cd:70:ea:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344 Validity Not Before: Jul 20 16:01:24 2026 GMT Not After : Jul 21 17:55:24 2026 GMT Subject: CN=50E1B392DBE672FE50EC4B98E6E0FB8ABEEB1E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:50:41:fb:23:01:11:84:f6:24:2d:aa:c1:18: 98:cf:6a:1d:36:eb:79:22:a7:74:e8:da:d2:00:4a: b7:7f:9d:8b:db:d9:e2:c6:0d:6d:5a:57:49:14:d3: c8:5f:3c:41:81:43:51:90:af:23:a2:52:2d:22:cc: 5b:97:10:63:3b:0f:3d:ab:0e:8b:cf:b9:95:f5:84: c7:ce:31:bf:0a:60:a4:25:11:a5:3f:e5:b3:0e:e9: c3:13:53:56:67:9d:e9:b6:55:06:ea:7d:ec:dd:84: c3:73:1f:4f:7e:2e:70:65:05:82:e2:45:c9:57:83: 1f:0b:fa:fd:a0:96:9a:33:a0:aa:07:fb:c2:23:73: 51:1b:9d:1c:23:98:2d:88:db:a5:5b:66:2a:fb:38: 1b:fc:6d:40:37:f2:b4:13:23:22:a6:a2:49:18:57: 48:31:2a:1a:0b:08:81:ce:f3:b7:39:78:9b:39:ff: 3b:43:41:d6:d7:5e:6f:dd:1b:fd:c3:76:8c:b2:24: ff:a7:b2:7f:ce:2e:2e:8f:38:d2:b0:05:b9:5e:dd: cd:d6:cf:23:02:bb:f5:32:90:a4:f2:af:8f:e1:0c: 23:01:e1:46:64:f8:5a:bf:24:41:8f:8d:b0:ba:e4: b9:8e:2b:d2:22:c4:22:bb:c2:78:c7:66:cd:9f:06: f7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:B3:92:DB:E6:72:FE:50:EC:4B:98:E6:E0:FB:8A:BE:EB:1E:8C X509v3 Authority Key Identifier: keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:96:f0:28:ba:a1:af:8d:4c:cc:02:1d:4c:e6:ba:ba:a3: 88:8e:fb:60:64:7b:e1:0c:c0:ea:f6:71:86:0f:27:43:cd:dd: 3e:02:5a:4e:69:98:c7:66:67:92:8a:e3:26:58:0e:48:92:4b: 92:4b:1a:b5:94:fb:bb:d8:3e:e1:b5:ad:2a:16:e9:81:40:32: 98:5d:af:65:09:96:82:1e:85:a2:b8:58:87:d7:8e:8f:d9:93: ba:c4:ed:8a:d6:83:7d:e5:ec:81:68:32:ed:02:c5:c6:e8:03: 16:62:44:f7:3d:aa:1c:b9:ff:c7:14:17:46:14:27:6c:ca:1f: a1:2f:d3:e5:e3:af:0a:c4:1f:86:30:99:43:3c:31:15:67:8a: fa:3f:0d:4c:9f:14:dd:9d:a6:c2:74:f3:01:ca:7c:7a:3a:67: 6f:f5:f1:fa:7a:db:85:0f:1d:9b:37:8f:c7:65:6d:b3:08:a5: 22:fc:ad:c6:e1:8b:8d:14:bb:c3:6e:49:a2:d0:00:48:8b:04: b0:0e:23:fd:17:bb:7f:a7:3b:fb:49:f3:f7:a9:74:da:cd:77: 87:fe:33:76:8e:51:d6:1f:45:bc:6b:f5:84:15:3e:d7:2f:9b: 4c:97:58:1d:33:34:85:90:4e:eb:83:6e:b6:78:62:bb:60:9f: 9f:26:83:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaZsWKjmkqVhjL3IZkpXB81w6nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZE ODhDMTM0NDAeFw0yNjA3MjAxNjAxMjRaFw0yNjA3MjExNzU1MjRaMDMxMTAvBgNV BAMTKDUwRTFCMzkyREJFNjcyRkU1MEVDNEI5OEU2RTBGQjhBQkVFQjFFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrUEH7IwERhPYkLarBGJjPah02 63kip3To2tIASrd/nYvb2eLGDW1aV0kU08hfPEGBQ1GQryOiUi0izFuXEGM7Dz2r DovPuZX1hMfOMb8KYKQlEaU/5bMO6cMTU1Znnem2VQbqfezdhMNzH09+LnBlBYLi RclXgx8L+v2glpozoKoH+8Ijc1EbnRwjmC2I26VbZir7OBv8bUA38rQTIyKmokkY V0gxKhoLCIHO87c5eJs5/ztDQdbXXm/dG/3DdoyyJP+nsn/OLi6PONKwBble3c3W zyMCu/UykKTyr4/hDCMB4UZk+Fq/JEGPjbC65LmOK9IixCK7wnjHZs2fBvebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOGzktvmcv5Q7EuY5uD7ir7rHowwHwYDVR0j BBgwFoAUnArXBio+Bg11pVtOUEf2r9iME0QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTAzZTcxZmUtYWQzMy00ZDEyLTg3MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYy QTNFMDYwRDc1QTU1QjRFNTA0N0Y2QUZEODhDMTM0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QzBBRDcwNjJBM0UwNjBENzVBNTVCNEU1MDQ3RjZBRkQ4OEMx MzQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvOUMwQUQ3MDYyQTNFMDYwRDc1QTU1QjRFNTA0N0Y2 QUZEODhDMTM0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzVlvAouqGvjUzMAh1M5rq6o4iO+2Bke+EM wOr2cYYPJ0PN3T4CWk5pmMdmZ5KK4yZYDkiSS5JLGrWU+7vYPuG1rSoW6YFAMphd r2UJloIehaK4WIfXjo/Zk7rE7YrWg33l7IFoMu0CxcboAxZiRPc9qhy5/8cUF0YU J2zKH6Ev0+XjrwrEH4YwmUM8MRVnivo/DUyfFN2dpsJ08wHKfHo6Z2/18fp624UP HZs3j8dlbbMIpSL8rcbhi40Uu8NuSaLQAEiLBLAOI/0Xu3+nO/tJ8/epdNrNd4f+ M3aOUdYfRbxr9YQVPtcvm0yXWB0zNIWQTuuDbrZ4Yrtgn58mg7s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:51 2026 by rpki-client